Case chat-ask-ai-leakModel & data leakWorldwide
Chat & Ask AI app leaks ~300M messages from 25M users via open Firebase
A researcher found the popular AI chat wrapper's Firebase rules left full chat histories readable, exposing about 300 million messages tied to more than 25 million users.
HighAttack on AIStatus: PatchedVerified case file
Open in the interactive mapCite this case
- Reported
- Jan 29, 2026
- Location
- Worldwide
- Target
- Codeway Chat & Ask AI
- Severity
- High
- Triggered by
- Independent researcher known as Harry (responsible disclosure)
- Actor type
- Security researchers
- Reported loss
- None reported
- CVE
- None
What happened
A researcher found the popular AI chat wrapper's Firebase rules left full chat histories readable, exposing about 300 million messages tied to more than 25 million users.
Impact: About 300 million messages tied to roughly 25 million users exposed, including sensitive content such as self-harm and drug queries; data from other Codeway apps also exposed.
Who triggered it
Actor: Independent researcher known as Harry (responsible disclosure)
Attribution: Self-disclosed by the researcher; reported by Malwarebytes
Motive: Research; no malicious exploitation reported
How it happened
Attack vector: Firebase Security Rules set to public, allowing unauthenticated read, write and delete of the chat database
Root cause: Misconfigured Firebase backend shared across Codeway apps; no access controls on user chat collections
Timeline
- Researcher finds the open Firebase backend and reports it to Codeway
- Researcher publishes findings
- Malwarebytes reports the leak
Response
Codeway reportedly fixed the rules across its apps within hours of the report; no regulatory action reported.
Current status: Patched
Sources (open in a new tab)
- Malwarebytes malwarebytes.com
- Fox News foxnews.com
- Hackmag hackmag.com
Cite this case
Chat & Ask AI app leaks ~300M messages from 25M users via open Firebase. AI Threat Watch, case chat-ask-ai-leak, Jan 29, 2026. https://aithreat.io/cases/chat-ask-ai-leak/
Permanent link: https://aithreat.io/cases/chat-ask-ai-leak/